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DATA ENCRYPTION BY NONLINEAR TRANSFER FUNCTION 
Field of the Invention 
This invention relates to encryption 
of digital data signals, and more particularly 
5 to encryption by nonlinear- impulse-response 
filters. 

Background of the Invention 
Most data encryption systems operate 
on the binary data produced by the data source . 

10 The data may be encoded for error detection 

andor correction before or after the 
encryption. The encryption is often performed 
by scrambling the data sequence with a "key" 
data sequence in order to conceal the original 

15 data sequence. Attempts may be made to alter 
the statistics of the encoded signal to make 
the signal appear more like random noise. 
After the encryption, the encrypted signal may 
be transmitted over a data path, or stored in a 

20 storage medium for later use. The transmission 
over a data path or storage may be viewed as a 
"channel" by which the encrypted signal is made 
available at a different time or venue. In any 
case, conventional digital signal processing 

2 5 techniques appropriate for the channel in 
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question are used to aid in the transmission 
over the channel . Such techniques may include 
framing/packet i z ing , interleaving , modulat ing , 
filtering, and amplification. At the receiving 
5 end of the channel, the reverse operations are 
performed, in order to retrieve the original 
binary sequence . 

An unauthorized or unintended entity 
which gains access to the encrypted signal by 
10 interception from the channel can apply various 
techniques to the encrypted signal, in an 
attempt to extract the original binary 
sequence . 

U.S. Patent 5,101,432, issued March 
15 31, 1992 in the name of Webb, describes a 

digital signal encryption technique in which 
the encryptor is a finite-impulse-response 
(FIR) network in which the impulse response is 
varied in time as the signal is encrypted, so 

2 0 that the impulse response "rolls" between 

different values during encryption. As 
described therein, the FIR network encrypts the 
signal by transforming with a substantially 
continuous nonlinear complex function of 
25 frequency, or in other words it disperses the 
original signal in time. This dispersion 
results in irregular "random- appearing" 
variations in amplitude of the signal. The 
random- appearing variations are not random, 

3 0 however, but arise from the time dispersion. 

The magnitude and possibly the phase spectra of 
the transformed signal are then complicated 
non- linear functions of frequency. Time 
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dispersion as suggested by Webb implies 
distortion in the frequency domain. The time 
dispersion which Webb imposes on the signal 
during encryption is "inverted" by a decrypting 
5 filter. 

Improved signal encryption/decryption 
techniques are desired. 

Summary of the Invention 
The present invention, in general, 
10 uses nonlinear transformations of one or more 
sets of delayed signal samples to achieve 
encryption. These delayed samples may be 
further nonlinearly combined before submission 
of the combined signals to the transmission 
15 process. The nonlinear transformations can be 
*F selected so as to distort the signal spectrum 

or not, depending upon the type of encryption 
SS desired. The nonlinear transformations are 

" particularly useful in the context of 

p 2 0 communications which are broadcast or which 

03 ' take place over wireless channels, as the 

jJL effect of one form of the encryption is similar 

O to that of "fading" of the channel, and 

= preferably rapid fading, thereby masking the 

25 fact that the transmission is encrypted. 

A method according to an aspect of 
the invention, for encrypting and decrypting 
digital data for transmission over a channel, 
includes the step of delaying the digital data 
30 by at least one delay increment, to thereby 

generate a plurality of time-sequential signal 
samples. Where there is but a single delay, 
two mutually time -sequential samples are 
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available, and more mutually time-delayed 
samples are available with more delay elements. 

According to a mode of the method, a set of 
distortion keys are provided, which set 
5 includes at least one key which has a nonlinear 
transfer function. The key having a nonlinear 
transfer function may be one (or more) of (a) 

sin x; (b) cos x; (c) exp ( j *7i*M (k) ) ; where 
M(k) is a conventional scrambling sequence; (d) 
10 (sum of [ai*x A i]}, where the ai are complex 

constants, which may be variant in time, or not 
variant in time; ^id (e) sgn (x) , where sgn(x)=l 

if x>0 and sgn(x)=^if x<0 . Each of the time- 
sequential signal samples is operated on by one 

15 of the keys which is a nonlinear transfer 

function, to thereby generate, at any instant, 
a plurality of distorted samples of the signal. 

The plurality of distorted samples of the 
signal is (or are) summed or nonlinear ly 

2 0 combined, to thereby generate a distortion- 
encrypted signal. The distortion-encrypted 
signal is applied to an input of the channel 
over which the information is to be 
transmitted. The distortion-encrypted signal 

2 5 is extracted from an output of the channel', to 

form an extracted distortion-encrypted signal. 

The extracted distortion-encrypted signal is 
decrypted. 

According to one hypostasis, the 

3 0 method further includes, before the step of 

delaying the error-correction-encoded signal by 
at least one delay increment, the step of 
forward error correction encoding the digital 
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data. In another hypostasis , the set of 
distortion encoding keys includes at least one 
nonlinear transfer function in which the 
coefficients of the nonlinear transfer function 
5 vary with time. In a particular variation of 

the method, the set of distortion encoding keys 
includes at least one nonlinear transfer 
function in which the coefficients of the 
nonlinear transfer function vary with time at a 

10 recurrence rate corresponding to the bit rate 
of the digital data. 

In yet another mode of the method, 
the input of the channel is at a location which 
is distant from the output of the channel, and 

15 the; channel comprises (a) a modulator coupled 

to the input of the channel, for modulating the 
distortion-encrypted signal onto at least one 
carrier signal and (b) a demodulator coupled to 
the output of the channel for extracting the 

2 0 distortion-encrypted signal from the at least 

one carrier signal, and the method further 
includes the step of performing modulation at 
the input of the channel, and performing 
demodulation at the output of the channel at 
25 the location remote from the input. 

In another version of the method, the 
channel includes a storage medium, and the 
method further comprises the step of 
interposing a delay between the step of 

3 0 applying the distortion-encrypted signal to the 

input of the channel and the step of extracting 
the distortion-encrypted signal from the output 
of the channel. The step of interposing a 
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delay may include the step of recording the 
distortion-encrypted signal onto a magnetic 
disk, and playing back the magnetic disk at a 
time later than the recording. 
5 According to one mode of the method, 

the step of decrypting the extracted 
distortion-encrypted signal is performed by a 
method comprising maximum likelihood sequence 
estimation. The maximum likelihood sequence 
10 estimation may be accomplished by a Viterbi 
algorithm. 

Brief De scription of the Drawing 
FIGURE 1 is a simplified block 
diagram illustrating a system including a 
15 source of signal, an encryptor, a transmission 
channel, and a decryptor, showing placement of 
conventional encryption functions and of the 
encryption according to the invention; 

FIGURE 2 is a simplified diagram 
20 illustrating details of the distortion 
encryption block of FIGURE 1; 

FIGURE 3 is a representation of a 
signal constellation of input and output 
signals of a two -tap encryptor according to an 
25 aspect of the invention in a QPSK context; 

FIGURE 4 is a power spectrum of input 
and output signals of the encryptor of FIGURE 
3; 

FIGURE 5 is a simplified block 
3 0 diagram of a communication path including an 

encryptor and decryptor according to an aspect 
of the invention, in the context of a noise- 
free transmission channel; 
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FIGURE 6 is a table listing some 
characteristics of different types of 
decryptors in the example of FIGURES 3 and 4; 
and 

5 FIGURE 7 is a simplified block 

diagram of a communication path similar to that 
of FIGURE 5, which provides for the possibility 
of temporal movement or signal storage. 

Description of the Invention 
10 In FIGURE 1, a communication system 

10 according to an aspect of the invention 
includes a source arrangement 12 , a 
transmission channel 14, and a user or sink 
O arrangement 16. In source arrangement 12, a 

^ 15 source 18 of binary digital data representing 

Jp the information to be transmitted to a data 

sink 38 is coupled to an input port 20il of a 
Sj block 20. Block 20 may be an encryption 

^ arrangement which makes the binary sequence 

20 spectrum appear to be random or noise- like. 
Q3 Encryptor 20 also receives another binary "key" 

sequence K x at its input port 20i2. The 
q encryptor may include a logical operation, such 

« as an exclusive -OR, which scrambles the binary 

25 data sequence with the binary key sequence K x . 

Encryption may also include permutation of data 
blocks. Such operations are used in the common 
DES standard, set forth in "Cryptography for 
the Internet," by Zimmerman, published in the 
30 October, 1998 issue of Scientific American. 

The binary data is applied from encryptor 2 0 to 
a forward error correction block 22, which 
represents the application of forward error 
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correction and detection to the signal. The 
digital data, which may be designated x k (m) , 
flows from block 22 to an input port 24 il of a 
block 24, which represents distortion 
5 encryption according to an aspect of the 

invention, to form distortion encrypted digital 
data. The encryption performed in block 24 
requires that a second key set K 2 be applied to 
a second input port 24i2. It should be noted 

10 that keys constitute a set, by contrast with 
the key K x . The encrypted digital data is 
applied from output port 24o of block 24 of 
source arrangement 12 to an input port 14 i of 
the transmission channel illustrated as block 

15 14. 

Transmission channel 14 of FIGURE 1 
may be as simple as a wire transmission path 
extending between its input port 14 i and an 
output port 14o, or it may be an optical path 

2 0 which includes electrooptical transmitters and 

receivers, or it may be a free -space 
electromagnetic path (radio, or the like) 
including a transmitter/modulator 26, path 28, 
and receiver/demodulator 30, all as known in 
25 the art. In any event, the encrypted digital 
data is transmitted from input port 14 i to 
output port 14o of block 14 . In the context of 
a radio path, channel 14 may have its input 
port 14i and its output port 14o spaced apart. 

3 0 The received and demodulated 

encrypted digital data at output port 14o of 
channel block 14 of FIGURE 1 is applied to an 
input port 32il of a distortion decryptor block 
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32, together with a replica of key set K 2 
applied to input port 32i2, to thereby 
distortion-decrypt the digital data. The 
digital data so distortion-decrypted is applied 
5 to an error detector and correction arrangement 
illustrated as a block 34, which produces 
corrected digital data, ideally identical to 
that produced by conventional encryption 
algorithm 20. The corrected digital data is 

10 applied to an input port 3 6il of a conventional 
decryptor 36, together with key K x applied to 
input port 36i2, to decrypt the signal to 
binary form. The binary form is ideally 
identical to the binary signal produced by 

15 digital source 18. The decrypted binary signal 
is applied from decryptor 36 to a user, 
represented as sink 38. 

The basic encryption according to an 
aspect of the invention is to apply nonlinear 

2 0 distortion to the signal before it is 

transmitted over the channel, whether that 
channel be a wire connection or a free -space 
path. The coefficients which produce the 
distortion are, generally speaking, functional 

2 5 operators performed on mutually delayed samples 

of the signal, and not simply constants by 
which the signal samples are multiplied, as in 
the Webb patent and in conventional digital 
filtering . 

3 0 FIGURE 2 illustrates an encryptor 

according to an aspect of the invention. In 
FIGURE 2, the encryptor includes a tapped delay 
line 210 including a first delay element 210!, a 
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second delay element 210 2/ . . and an LP* 
delay element 210 L# with an output taken before 
and after each delay element. More 
particularly, a tap 212 x precedes delay element 
5 210^, a tap 212 2 follows delay element 210! and 
precedes delay element 210 2 , . . ., and a tap 
212 L+1 follows delay element 210 L . The input 
signal or data to be transmitted X k (m), which 
can in general be a sequence of complex 
10 numbers, is applied to input port 24il,and 

appears undelayed at tap 212!- The delay T s of 
each delay element of tapped delay line 210 is 
equal to the symbol sample duration of the 
O applied signal- Thus, a stream or sequence of 

J5= 15 complex data enters tapped delay line 210 at a 

«p rate of once per T s seconds, where T s is the 

;H sample interval. The input symbol is 

%| denoted x k , and input symbols are generated at a 

W rate of one per T sytn seconds. For simplicity, 

« 2 0 the description in the following sentence and 

CO paragraph assume that T s =T sym . Thus, at any 

I; time, the symbol at tap 212 x is x k , and the 

p symbol at tap 212 2 is x k _ x or zero, and the 

B symbol at tap 212 k . L is x k _ L or zero. 

2 5 The current sample at each tap of 

FIGURE 2 has a function performed on it by a 
functional block of a set 214 of key functions. 

More particularly, sample x k (m) at tap 212 x is 
modified by function f 0 (*, n) in a block 214 x# 
30 sample x k _ x (m) at tap 212 2 is modified by 

function f 1 (^ t n) in a block 214 2 , . . ., and 
sample x k _ L (m) at tap 212 L+1 is modified by 
function fj(*, n) in a block 214j. The 
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functions can in general be memoryless 
functions, meaning that they are incapable of 
dispersing the signal in time. However, some 
of the functions in blocks 214 1# 214 2/ . . . , 
5 214j may be dispersive. A salient feature of 
one aspect of the invention lies in that at 
least one of the functions is a nonlinear 
transfer function . 

The mutually delayed, f unctionally- 

10 operated signals appearing at the output ports 
of blocks 214 1# 214 2 , . . ., 214 a are applied to 
the input ports of a summing or combining (+) 
circuit 216. The output signal of summing or 
combining circuit 216 is the distortion- 

15 encrypted output sequence {y n } , emitted at the 
rate one symbol per T sym seconds at output port 
24o. This combining operation may also be 
nonlinear, e.g. f 0 x k *f 1 x k _ 1 , where * represents 
multiplication. 

2 0 In general, the sampling time T s 

discussed in conjunction with FIGURE 2 will be 
the input symbol time T sym divided by a small 
positive integer m, such as m=l or m=2, and so 
that the outputs occur at sampling times 

2 5 nT s =(k/m)T sym (1) 

When m is greater than one, there are m-1 
zeroes between each actual symbol in the tapped 
delay line. The superscript "m" on the input 
sequence symbolizes this condition. There are 

3 0 J+l taps in the delay line, and the number of 

symbols contained in the tapped delay line is 
L. From these conditions, we find that 

mL+l<J<mL+m (2) 
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For example, if m=2 and L=4 , J must be either 9 
or 10. 

The use of a tapped delay line allows 
the encryptor according to the invention to be 
5 easily implemented with digital circuitry, and 
serves to introduce intersymbol interference, 
to thereby distort the input digital signal. 
The intersymbol interference is akin to that 
introduced by a dispersive (multipath or 

10 severely bandlimited) path or channel. For the 
strongest encryption, the intersymbol 
interference should be rapidly time varying, so 
that unintended or unauthorized receivers 
cannot acquire and "learn 11 the "coefficients." 

15 In order to further improve the 

encryption to make unauthorized decryption more 
difficult, an aspect of the invention uses 
functional operations on each tap of the delay 
line. More specifically, on the i^ tap, if the 

20 input is symbol x k _ r (m), the output will be f r (x k _ 
r (m), n) . This notation implies that the 
functions can change at each sampling time nT s . 

The distortion encryptor output at time nT s is 
then described by 

y n =if p (xj m> ,n) (3) 

25 

These functions can be represented by any 
mathematical operation, if possible to 
implement, such as linear, quadratic, cubic, . 
. . transcendental . 
3 0 The encryptor output as set forth in 
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equation (3) represents the output of a 
discrete time dispersive channel with tap 
vector =[f 0 , £ x , . . ., f L ] when the input is 
the sequence {x k }, as set forth in J.G. Proakis, 
5 Digital Communications, 2 nd edition, McGraw- 
Hill, New York 1989. With such a signal, the 
appropriate recovery method is termed 
"equalization." Equalizers essentially attempt 
to undo the distortion introduced by the 

10 dispersive channel, with the overall goal of 
being the reliable estimation of the 
transmitted sequence {x k } . Three types of 
equalizers are in common use, namely linear 
equalizers, decision feedback equalizers, and 

15 maximum- likelihood sequence estimators. For 

the purpose of decrypting the encrypted signals 
produced by the arrangements of FIGURES 1 and 
2, the maximum likelihood sequence estimator 
(MLSE) is most effective. The MLSE requires 

2 0 knowledge of the channel coefficients (that is, 

the coefficients of the "dispersive channel, " 
which is the described encryptor) , and attains 
this knowledge through an estimation scheme. 
In general, the MLSE, must also have knowledge 
25 of L, the number of symbols contained in the 
delay line of the equivalent dispersive 
channel . Failure to make a good estimate of 
the coefficients of the dispersive channel 
results in mismatch of the MLSE to the 

3 0 encryption, which undesirably causes an 

estimated sequence {x k } having a high proportion 
of errors . 

In the particular instance of 
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encryption by functions, as described in 
conjunction with FIGURES 1 and 2, and as set 
forth in equation (3) , rapid variation of the 
functions, as for example significant or 
5 appreciable variation over times less than or 
equal to T sym# makes conventional MLSE very 
difficult. The difficulty increases as L 
increases, as the rate of change of the tap 
functions increases, and as the complexity of 

10 the tap functions increases. For decryption of 
signals encrypted by functions such as those 
described, which include functions which have 
nonlinear transfer characteristics, decryption, 
according to an aspect of the invention, is by 

15 MLSE matched to the known distortion encryptor. 

The MLSE is easily implemented by the Viterbi 
algorithm (VA) described in G.D.Forney "The 
Viterjbi Algorithm" , IEEE Proceedings, vol. 61, 
pp268-278, March 1973. In the decryptor block 

2 0 32 of FIGURE 1, the key set 1^ applied to input 
port 32i2 includes values of length parameters 
L and J, the sampling time T s relative to the 
symbol time T sym , and the set of tap functions 
f i («,n) for all time n. Naturally, the 

2 5 decryptor must be synchronized with the 

encrypted signal. This synchronization may be 
accomplished in conventional manner, by the use 
of a known training preamble pattern preceding 
the actual information signal. 

3 0 A simulation of a communication 

system according to the invention was tested 
with the following parameters: 
m=l (T s =T sym and n=k) ; 
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L=J=1 (corresponding to a single delay- 
element) ; 

f 0 (x k ,k)=f 0 (x k )=0.8x k ; and 

f i (Xr-i, k) =f 1 (x^) =0 . 6 (x^) 2 
5 which are not time-varying functions, but which 
includes a nonlinear transfer f x . The input 
sequence {x k } for this simulation was an 
uncorrelated quaternary phase-shift-keyed 
(QPSK) symbol sequence of unit magnitude, with 
10 symbols x k equal to e j9tc with 0 k in the set {o, 
n/2, 7i, 37t/2}. Blocks of 1000 symbols each 
were encrypted and transmitted. FIGURE 3 is an 
illustration of the input and output signal 
constellation. In FIGURE 3, the input signal 
15 points are represented by asterisks, and the 
output signal points are illustrated by 
squares. The squaring operation does not 
produce any spectral lines, since the output 
constellation is zero mean, in that all symbols 
20 have equal probability. FIGURE 4 illustrates 
input and output power spectra. The input and 
output spectra of FIGURE 4 are 

indistinguishable, and therefore FIGURE 4 does 
not explicitly evince encryption. The power 

25 spectrum of FIGURE 4 was obtained by averaging 
100 independent blocks, each having sample 
vectors of 1000 symbols each. The input and 
output power spectra are essentially identical, 
so the distortion encryption operation has no 

3 0 effect on the transmitted signal spectrum in 

this particular case. For encryption which is 
most difficult to decrypt, a distorted spectrum 
may be desirable. 
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FIGURE 5 is a simplified block 
diagram of a cascade 510 of a distortion 
encryptor 512 according to an aspect of the 
invention, which distortion encrypts source 
5 signals {x k } to produce distortion encrypted 
signal {y k } on a path 514, cascaded with a 
receiver 516 which produces an estimate of the 
sequence of source signal {x k } on output path 
518. The arrangement of FIGURE 5 provides a 
10 basis for analyzing the performance of various 
receivers 516. The table of FIGURE 6 lists the 
symbol error probability P s for five different 
distortion-encryptor/receiver combinations , 
O termed "cases." Case number 1 of the table of 

Jp; 15 FIGURE 6 is for a matched Viterbi Algorithm 

JE (designated 1) , which may be viewed as 

|^ representing the "authorized" decryptor. From 

G FIGURE 6, the value of P s is zero, which 

UJ represents perfect errorless decryption. 

JL 2 0 Cases 2 and 3 of the table of FIGURE 

£o 6 represent unmatched Viterbi Algorithms 

pf (designated by the number 2) that assume a 

q linear channel. For these unmatched receivers, 

O the coefficients are set to the optimum least - 

25 squares estimates of the coefficients, assuming 
that the receivers knew the first 10 0 
transmitted symbols, as described in S.Haykin 
"Adaptive Filter Theory' 1 2^ edition, Prentice- 
Hall, Englewood Cliffs, NJ, 1991, for ten sets 
30 of 1000 transmitted symbols, in the absence of 
channel noise. These least squared values are 
the ones which would minimize the sum of the 
squared errors between the filtered received 
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sequence {y k } filtered by the receiver filter 
with coefficients {w ± }, i=(l / 2 / . . . , M) and the 
desired sequence {x k } . The least-squares 
estimate is the best linear unbiased estimate, 
5 and represents the best that the unauthorized 
receiver could do if it knew the first 100 
transmitted symbols {x k } and, used a linear 
filter. It should be understood that the 
unauthorized receiver will generally not know 

10 the first 100 transmitted symbols, and the 
transmitted sequence would ordinarily be of 
greater length than 1000 symbols. 

Case number 2 of the table of FIGURE 
6 is for an unmatched Viterbi Algorithm 

15 decryptor in the situation in which an 

unauthorized decryptor might assume linear 
distortion, but does not know of the amplitude 
nonlinearity, in that it assumes that 

f 0 (x k , k) =0 . 8x k and that f 1 (x k _ lf k) =0 . 6x k _ x , 

20 with the application of channel coefficients 
w 0 =0.8 and w^O . 6 . The coefficients used for 
the "unauthorized" receiver/decryptor in this 
case 2 were selected to equal the constant 
parts of the nonlinear functions employed in 

25 encryption, in order to more accurately model a 
real -world situation in which the constant 
parts might be correctly estimated. As set 
forth in the right column of the table of 
FIGURE 6, P s has a value of 0.251 for this case, 

30 representing unusably high error in decrypting 
the encrypted signals {x k } . 

Case number 3 of the table of FIGURE 
6 is for a Viterbi Algorithm decryptor, in 
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which the amplitude nonlinearity of the 
encrypting is similarly not recognized, but 
which uses the least-squares coefficients as 
determined over 100 symbols. The resulting 
5 error probability becomes 0.091, or almost 10%. 
Such a high error rate makes the Viterbi 
Algorithm decryptor relatively useless for 
generating a reliable estimate of the received 
symbols, even with coefficients selected on the 

10 basis of least -squares approximation with 100 
known symbols. In the absence of the 
advantages of knowing the first 100 symbols, it 
seems unlikely that this decrypting scheme 
would be at all useful. 

15 Cases 4, 5, and 6 of the table of 

FIGURE 6 are for the situation in which the 
receiver 516 of FIGURE 5 is a linear equalizer, 
which is less powerful for decrypting than the 
Viterbi Algorithms of cases 2 and 3. Case 4 is 

20 for a linear equalizer with three coefficients 
set equal to the least-squares estimates over 
100 known symbols, and the resulting symbol 
error probability is 0.058. Comparing cases 3 
and 4, it can be seen that the "unmatched" 

2 5 Viterbi algorithm performed worse than the 

simple linear equalizer; this illustrates the 
well-known sensitivity of MLSE to mismatch. 
Case 5 is for a linear equalizer with seven 
coefficients equal to least-squares estimates 

3 0 over 100 known symbols, and the resulting 

symbol error rate is 0.18. Case 6 is for a 
linear equalizer with eleven coefficients equal 
to the least-squares estimates over 100 known 
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symbols, and the resulting symbol error rate is 
0.222 . 

An unauthorized receiver or 
"eavesdropper, " in order to decrypt a signal 
5 encrypted according to an aspect of the 

invention, must first identify the system as 
being one in which amplitude andor phase 
nonlinearity is intentionally used. In a 
context in which fading may be expected, even 
10 this step may be difficult. In the absence of 
knowledge of the nonlinearity and the 
. coefficients andor functions which control it, 
the decoding must be done "blindly, 11 as 
described by Lainiotis and Papaparaskeva "A 
15 Partitioned Adaptive Approach to Nonlinear 
Channel Equalization, 11 IEEE Transactions on 
Communications, vol. 46, no. 10, pp 1325-1336, 
October 1998. 

The invention differs from Webb's 

2 0 arrangement in that the invention uses a 

nonlinear transformation in the time domain, 
which can yield a linear transfer function in 
the frequency domain. By contrast, Webb's 
arrangement uses a linear transformation in the 
25 time domain to obtain nonlinear transfer 

functions in the frequency domain. The linear 
transfer function in the frequency domain can 
be advantageous in that it tends to disguise 
the encryption, or make it difficult to 

3 0 determine that encryption has taken place. As 

in the earlier example, for the case of a 
quaternary phase modulation (QPSK) input 
signal, the complex input symbols lie in the 
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set {l, j, -1, -j} where j = square root of (- 
1) . The encryptor function 

y n = 0.8 (X n ) +0.6 (X^) 2 

where : 

5 y n = the output at time n; 
X n = input at time n; and 
X n _ 1 - input at time n-1, 

yields an output power spectrum that is 
identical to that of the input. This means 

10 that the amplitude transfer function is unity. 
The same conclusion regarding the amplitude 
transfer function applies to any unit -magnitude 
input signal type, which is to say for any size 
phase modulation alphabet. 

15 FIGURE 7 is similar to FIGURE 5, but 

includes a signal or information storage scheme 
for temporally storing the message transmitted 
over the channel . Note that the arrangement of 
FIGURE 5 allows transmission only in the 

20 spatial context. In FIGURE 7, signal {x k } is 
applied to distortion encryptor 512, which 
produces an encrypted signal . The encrypted 
signal is applied to a channel or transmission 
path designated generally as 714, from which 

25 the signal is applied to receiver 516. 

Receiver 516 produces an estimate of {x k } as 
described above on a path 518. Path 714 may 
include either a temporal movement, location 
movement, or both. As illustrated in FIGURE 7, 

3 0 path 714 includes a recording device 

illustrated as 714, which receives the 
encrypted information, and stores the 
information on a storage medium. The medium 
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stores the encrypted information, and after 
temporal movement (after a period of time) the 
recording may be replayed, for application 
directly to the receiver 516. Thus, if the 
5 receiver 516 is at the same site or location as 
the encryptor, there is no movement in space, 
and only movement in time has occurred. On the 
other hand, if the receiver 516 is at a distant 
location, the recording medium with the 

10 recorded message may be physically transported 

over path 790 to a player illustrated as 714 2 at 
a distant location, and replayed at that 
distant location for application to receiver 
516, thus effectuating both temporal and 

15 spatial movement. 

Other embodiments of the invention 
will be apparent to those skilled in the art. 
Should greater encryption security be desired, 
more taps could be used in the delay line, 

20 although the complexity of the authorized 

decryptor increases as , where fl^ is the 
number of symbols in the transmitted symbol 
alphabet (four for QPSK) , and L is the number 
of symbols in the delay line. Encryptor 

25 strength can also be increased by the use of 
time-varying functions or coefficients, such 
as, for example, f 0 (x k , n) =r kl x k and f 1 (x k _ 
x ,n) =r k2 (Xj^) 2 , where r kl and r k2 are complex 
Gaussian processes with a fairly large 

30 normalized Doppler spread, on the order of 

F D T S =0.1. Such random or pseudorandom processes 
are easily generated. 

Thus, a communication system 
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according to an aspect of the invention 
includes an encryptor and a decryptor. For 
improved encryption security, the encryptor 
includes a multitap delay line to produce 
5 mutually delayed samples of the signal to be 

encrypted- Each sample is operated on by a key 
or function to produce modified signal samples, 
and the modified signal samples are summed or 
combined to produce the encrypted signal . 

10 According to one aspect of the invention, at 
least one of the keys or functions includes a 
nonlinear function. In some embodiments, the 
functions are time-variant for improved 
security. Decryption is accomplished in some 

15 embodiments by an equalizer. The preferred 
equalizer is the maximum- likelihood- sequence 
estimators matched to the encryption functions. 

A Viterbi algorithm makes it easy to implement 
the matched equalizer. 

20 More particularly, the present 

invention, uses nonlinear transformations of 
one or more sets of delayed signal samples to 
achieve encryption. These delayed samples may 
be further nonlinearly combined before 

25 submission of the combined signals to the 
transmission process. The nonlinear 
transformations can be selected so as to 
distort the signal spectrum or not, depending 
upon the type of encryption desired. The 

3 0 nonlinear transformations are particularly 

useful in the context of communications which 
are broadcast or occur over wireless paths or 
channels, as the effect of one form of the 
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encryption is similar to that of 11 fading" of 
the channel, and preferably rapid fading, 
thereby masking the fact that the channel is 
encoded. 

5 A method according to an aspect of 

the invention, for encrypting and decrypting 
digital data for transmission over a channel, 
includes the step of delaying (210!, 210 2 , . . 
. , 210 L ) the digital data (x k ) by at least one 
10 delay increment, to thereby generate a 

plurality of time -sequential signal samples (at 
taps 212 17 212 2 , . . ., 212 L+1 ) . Where there is 
but a single delay, two mutually time- 
y sequential samples are available, and more 

m 15 mutually time-delayed samples are available 

HP with more delay elements. According to a mode 

[TJ of the method, a set (K^) of distortion keys are 

SJ provided, which set includes at least one key 

" which has a nonlinear transfer function. The 

p 2 0 key having a nonlinear transfer function may be 

JS one (or more) of (a) sin x; (b) cos x; (c) exp 

L£ (j*7t*M(k)), where M(k) is a conventional 

=f scrambling sequence; (d) {sum of [ai*x A i]}, 

3 1 

where the ai are complex constants, which may 

2 5 be variant in time, or not variant in time; and 

(e) sgn (x) . Each of the time-sequential signal 
samples is operated on by one of the keys which 
is a nonlinear transfer function, to thereby 
generate, at any instant, a plurality of 

3 0 distorted samples of the signal (at the output 

of set 214 of functions) . The plurality of 
distorted samples of the signal is (or are) 
summed or combined (216) , to thereby generate a 
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distortion-encrypted signal (y n ) . The 
distortion-encrypted signal is applied to an 
input of the channel (14, 514) over which the 
information is to be transmitted. The 
5 distortion-encrypted signal is extracted from 

an output of the channel (by demodulator 3 0 , if 
necessary) , to form an extracted distortion- 
encrypted signal . The extracted distortion- 
encrypted signal is decrypted. 

10 According to one hypostasis, the 

method further includes, before the step of 
delaying the error-correction-encoded signal by 
at least one delay increment, the step of 
forward error correction (22) encoding the 

15 digital data. In another hypostasis, the set 
of distortion encoding keys (1^) includes at 
least one nonlinear function in which the 
coefficients of the nonlinear function vary 
with. time. In a particular variation of the 

20 method, the set of distortion encoding keys (K 2 ) 
includes at least one nonlinear function in 
which the coefficients of the nonlinear 
function vary with time at a recurrence rate 
corresponding to the bit rate (T s ) of the 

25 digital data. 

In yet another mode of the method, 
the input (14i) of the channel (14) is at a 
location which is distant from the output (140) 
of the channel, and the channel comprises (a) a 

3 0 modulator (26) coupled to the input (141) of 
the channel (14) , for modulating the 
distortion-encrypted signal (Y N ) onto at least 
one carrier signal and (b) a demodulator (30) 
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coupled to the output of the channel for 
extracting the distortion-encrypted signal from 
the at least one carrier signal, and the method 
further includes the step of performing 
5 modulation at the input of the channel, and 
performing demodulation at the output of the 
channel at the location remote from the input. 

In another version of the method, the 
(14) channel includes a storage medium, and the 

10 method further comprises the step of 

interposing a delay between the step of 
applying the distortion-encrypted signal to the 
input of the channel and the step of extracting 
the distortion-encrypted signal from the output 

15 of the channel. The step of interposing a 
delay may include the step of recording the 
distortion-encrypted signal onto a magnetic 
disk, and playing back the magnetic disk at a 
time later than the recording. 

2 0 According to one mode of the method, 

the step of decrypting the extracted 
distortion-encrypted signal is performed by a 
method comprising maximum likelihood sequence 
estimation. The maximum likelihood sequence 

2 5 estimation may be accomplished by a Viterbi 
algorithm. 
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